Threat database

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.1	EPSS 0.2%	CVE-2025-64047RapidCMS · Cross-site Scripting Medium6.1EPSS 0.2%2025-11-24CVE Database V5CVE-2025-64047 OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-11-24
Medium	6.1	EPSS 0.2%	CVE-2025-64046RapidCMS · Cross-site Scripting Medium6.1EPSS 0.2%2025-11-17CVE Database V5CVE-2025-64046 OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-11-17
Critical	9.8	EPSS 0.5%	CVE-2024-45771rapidcms · SQL Injection Critical9.8EPSS 0.5%2024-09-06CVE Database V5CVE-2024-45771 RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-09-06
Critical	9.8	EPSS 0.5%	CVE-2024-44839rapidcms · SQL Injection Critical9.8EPSS 0.5%2024-09-06CVE Database V5CVE-2024-44839 RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-09-06
Critical	9.8	EPSS 0.5%	CVE-2024-44838rapidcms · SQL Injection Critical9.8EPSS 0.5%2024-09-06CVE Database V5CVE-2024-44838 RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-09-06

Page 1 of 1